argo-cd Helm chart

Name: argo-cd Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

argo

Scored 14 Sept 2026

A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.

Latest 10.9.0 3 days agoapp version v3.5.2 846Artifact Hub

argo-cd 10.9.0 deploys 3 container images: quay.io/argoproj/argocd, ghcr.io/dexidp/dex and ecr-public.aws.com/docker/library/redis. Across them, 362 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.36.0, fixed in 0.52.0. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

3,2180037325

362 findings over 3 of 3 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/argoproj/argocd×8	v3.5.2	009206	1,685
ghcr.io/dexidp/dex	v2.45.1	0024111	1,366
ecr-public.aws.com/docker/library/redis	8.6.4-alpine	0048	167

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

259 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-qgq7-7hm3-q39j	github.com/go-git/go-git/v5@v5.19.1	5.19.2
Low	UBUNTU-CVE-2026-48961	perl@5.40.1-7ubuntu0.1	no fix listed
Low	GHSA-hfvc-g4fc-pqhx	go.opentelemetry.io/otel/sdk@v1.39.0	1.43.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-q9hv-hpm4-hj6x	github.com/cloudflare/circl@v1.6.1	1.6.3
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.40.0	0.55.0
Low	UBUNTU-CVE-2026-7017	perl@5.40.1-7ubuntu0.1	no fix listed
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	UBUNTU-CVE-2026-76642	util-linux@2.41.3-3ubuntu2	no fix listed
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.81.1	1.83.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.36.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.36.0	0.52.0
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	UBUNTU-CVE-2026-35368	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.4	1.7.8
Low	GHSA-xmrv-pmrh-hhx2	github.com/aws/aws-sdk-go-v2/service/s3@v1.95.1	1.97.3
Low	UBUNTU-CVE-2026-19487	perl@5.40.1-7ubuntu0.1	5.40.1-7ubuntu0.2
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.36.0	0.52.0
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	UBUNTU-CVE-2026-35341	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GHSA-gxhx-2686-5h9g	github.com/slack-go/slack@v0.16.0	0.23.1
Low	GHSA-9h8m-3fm2-qjrq	go.opentelemetry.io/otel/sdk@v1.39.0	1.40.0
Low	ALPINE-CVE-2026-78408	util-linux@2.41.4-r0	2.41.6-r1
Low	UBUNTU-CVE-2026-78408	util-linux@2.41.3-3ubuntu2	no fix listed
Low	UBUNTU-CVE-2026-54369	acl@2.3.2-2	no fix listed
Low	GHSA-389r-gv7p-r3rp	github.com/go-git/go-git/v5@v5.16.4	5.19.0
Low	UBUNTU-CVE-2026-13595	util-linux@2.41.3-3ubuntu2	2.41.3-3ubuntu2.2
Low	UBUNTU-CVE-2026-54371	attr@1:2.5.2-4	1:2.5.2-4ubuntu0.1
Low	GO-2026-4981	stdlib@go1.26.2	1.25.10
Low	GO-2025-3563	stdlib@go1.24.0	1.23.8
Low	GO-2026-4977	stdlib@go1.26.2	1.25.10
Low	UBUNTU-CVE-2026-35352	rust-coreutils@0.8.0-0ubuntu3	no fix listed
Low	GO-2026-4986	stdlib@go1.26.2	1.25.10
Low	GO-2026-4918	stdlib@go1.26.2	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.40.0	0.53.0
Low	GO-2026-4337	stdlib@go1.25.3	1.24.13
Low	GHSA-crhj-59gh-8x96	github.com/go-git/go-git/v5@v5.16.4	5.19.1
Low	GO-2026-4601	stdlib@go1.25.3	1.25.8
Low	UBUNTU-CVE-2026-72522	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56403	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56404	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56405	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56408	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56406	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56407	expat@2.7.4-1	no fix listed
Low	UBUNTU-CVE-2026-56410	expat@2.7.4-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
10.9.0latest	3 days ago	v3.5.2	0037325	3,218
10.8.4	5 days ago	v3.5.2	0037325	3,218
10.8.2	7 days ago	v3.5.2	0033317	3,051
10.8.1	8 days ago	v3.5.2	0033317	3,051
10.8.0	9 days ago	v3.5.2	0033317	3,051

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/argo/argo-cd.svg)](https://charts.stackradar.io/charts/argo/argo-cd)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.